Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/0d9f3f6c0f7a1247ee6a4b69121a57746839fdf4.roa
File: 0d9f3f6c0f7a1247ee6a4b69121a57746839fdf4.roa (raw, json)
Hash identifier: 1JxHZU6xVrvhksa/tPO36Ni3j4A40Xdb+SH+EcdxbyM=
Subject key identifier: A2:4E:FD:E8:1D:2A:EC:B0:98:68:65:1E:73:07:98:B4:BC:8F:2E:21
Certificate issuer: /CN=ebff371d4ac1a6161db3e53f836c346c32163491
Certificate serial: 11C361
Authority key identifier: 76:EC:53:B1:F2:E8:7D:6B:B3:F7:BB:E4:04:3E:71:EF:30:48:FE:5C
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebff371d4ac1a6161db3e53f836c346c32163491.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/0d9f3f6c0f7a1247ee6a4b69121a57746839fdf4.roa
Signing time: Wed 19 Apr 2023 08:30:01 +0000
ROA not before: Tue 18 Apr 2023 08:30:01 +0000
ROA not after: Thu 17 Apr 2025 08:30:01 +0000
asID: 61509
IP address blocks: 143.255.136.0/22 maxlen: 22
170.83.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1164129 (0x11c361)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebff371d4ac1a6161db3e53f836c346c32163491
Validity
Not Before: Apr 18 08:30:01 2023 GMT
Not After : Apr 17 08:30:01 2025 GMT
Subject: CN=0d9f3f6c0f7a1247ee6a4b69121a57746839fdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f5:2a:81:39:e9:d9:7a:25:9b:04:d9:4c:a1:
c6:10:d2:df:d4:4e:32:7d:b6:e9:1c:b1:1e:41:93:
b7:6f:e7:5a:d5:db:61:ab:81:d5:4e:ea:bb:f1:22:
69:44:e0:c7:e2:07:b1:3d:ab:e7:21:0b:c1:be:fe:
4e:c4:fc:d6:ff:4f:f3:9d:12:6a:7c:e5:75:74:cb:
7a:b7:c2:03:98:3f:b8:6d:49:45:66:5d:d3:94:55:
08:13:d0:06:dc:8b:5d:80:c3:f3:81:3d:c8:0b:c4:
24:c8:f7:27:fd:07:fd:f9:56:61:52:97:96:08:26:
02:64:a6:54:b7:a2:e8:c2:2f:e3:d6:8e:83:b8:78:
01:c4:3f:b5:8e:a6:ba:c9:61:97:a1:a7:42:ce:ea:
02:24:93:6d:4e:c8:97:0b:32:d4:7d:22:fd:ec:89:
2f:6d:6a:87:30:7f:aa:1d:d3:a9:05:1e:8e:2f:48:
e7:ce:fd:21:d4:af:d1:f5:93:2f:7b:fa:f8:d0:1d:
83:e9:1f:91:43:bf:c6:eb:04:b7:f0:97:0b:0f:e9:
c7:67:ba:ae:26:29:bf:8c:2f:79:d0:d4:bc:10:4d:
97:59:50:a2:2a:c7:47:bd:d3:f8:74:a1:4c:2a:21:
fa:d3:05:d9:71:36:94:d4:af:4a:a7:f2:3e:08:35:
1b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4E:FD:E8:1D:2A:EC:B0:98:68:65:1E:73:07:98:B4:BC:8F:2E:21
X509v3 Authority Key Identifier:
keyid:76:EC:53:B1:F2:E8:7D:6B:B3:F7:BB:E4:04:3E:71:EF:30:48:FE:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebff371d4ac1a6161db3e53f836c346c32163491.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/0d9f3f6c0f7a1247ee6a4b69121a57746839fdf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/96881c95-fc1c-4dee-82db-dfb59a7209b9/ebff371d4ac1a6161db3e53f836c346c32163491.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.136.0/22
170.83.32.0/22
Signature Algorithm: sha256WithRSAEncryption
44:a3:0a:f3:eb:f8:29:99:a2:fc:af:dc:12:04:72:af:e4:94:
62:f0:62:8a:e9:db:8b:6e:b2:f4:cf:3a:2d:5b:b2:71:64:da:
24:89:70:9d:4e:72:71:77:38:0f:0f:e9:1e:ea:bc:64:87:ab:
f3:3a:d1:cd:2f:26:dc:46:27:b1:14:72:ae:60:4b:df:37:6f:
24:6f:00:e7:48:2d:96:a1:31:37:66:d7:63:cb:96:ca:cb:1e:
54:be:1c:08:b5:af:5d:71:54:c5:c2:8c:9e:75:e9:08:5a:ae:
ef:47:c7:39:e1:95:56:38:a1:3a:67:50:08:11:f2:27:29:e9:
67:4a:d3:7b:dd:a5:53:c4:2f:97:d4:56:48:88:55:2f:77:1a:
84:07:7c:16:43:dc:22:26:27:50:37:71:3f:6a:3c:a4:fe:02:
07:95:80:91:4f:7d:3a:87:2f:1f:d3:c8:7d:cb:a0:09:c7:1b:
d3:ad:52:35:ea:0f:d2:9b:9e:f7:3b:3c:a8:ef:da:35:78:40:
15:1d:e6:f9:44:f0:e0:ed:b2:e0:7f:17:f2:df:96:99:ba:ce:
a0:f0:94:bf:60:a9:10:5e:a4:d3:4e:64:b4:6f:c2:4e:71:04:
4e:e3:33:14:76:40:bd:f1:c5:a3:ba:08:03:1d:0f:d2:ab:f7:
ec:01:1e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-ams.rpki-client.org